• State Resolved
  • Locked Locked
  • Replies 3 replies
  • Subscribers 30 subscribers
  • Views 280 views
  • Users 0 members are here
Support feedback
Options
Options
Similar topics

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

AM2634: Questions about OTP KeyWrite

Shine
Genius 13655 points
Part Number: AM2634

Hello Champs,

Customer has below two questions about the OTP KeyWrite on AM2634.  

       1、The key supported on OTP KeyWrite is shown as below：


What are the function of MSV、SWREV-APP、SWREV-SBL、SWREV-HSM? Are there some examples for reference?

2. After writing the OTP KeyWrite successfully, the AM2643 is converted to HS-SE device. How to generate the tiimage file which meets secure boot requirements?


Thanks
Regards,
Shine

  • +1
    TI__Mastermind 25945 points

    Hi ,

    Shine said:
    SWREV-APP、SWREV-SBL、SWREV-HSM

    The SW Rev is Software Revision of Application, SW Revision of SBL and SW Revision of HSMRt Image. This is to prevent rollback protection in the device by HSM ROM and SBL.

    Shine said:
    2. After writing the OTP KeyWrite successfully, the AM2643 is converted to HS-SE device. How to generate the tiimage file which meets secure boot requirements?

    For booting the SBL securely, you need to add the following options during the build with a valid HSMRt Firmware (that needs to be signed with customer keys as well)

    It will build the SBL signed with customer keys.

    Best Regards,
    Aakash

  • 0 in reply to Aakash Kedia
    TI__Genius 13655 points

    Hi Aakash,

    Thank you very much for your great support.

    1. Customer met below error message when generating secure boot image file (windows OS and gmake)

           

     2. How to generate SBL binary image file and HSMRt which can meet the boot requirements?

    3.  Customer generates the SBL tiimage file by using makefile_ccs_bootimage_gen. Is there some script available which can convert bin file to SBL secure boot image file?


    Thanks
    Regards,
    Shine


  • +1 in reply to Shine
    TI__Mastermind 25945 points

    Hi ,

    Shine said:
    Customer met below error message when generating secure boot image file (windows OS and gmake)

    Please follow the following build steps to ensure that the build via makefile is stable and functional - https://software-dl.ti.com/mcu-plus-sdk/esd/AM263X/08_05_00_24/exports/docs/api_guide_am263x/MAKEFILE_BUILD_PAGE.html

    Shine said:
    How to generate SBL binary image file and HSMRt which can meet the boot requirements?

    To generate the HSMRt Image you need to install the TIFS firmware from My Secure SW. Also follow the steps from tifs documentation - file:///C:/ti/tifs_am263x_08_05_00_07/docs/api_guide_am263x/html/hsm_runtime_firmware.html

    Shine said:
    3.  Customer generates the SBL tiimage file by using makefile_ccs_bootimage_gen. Is there some script available which can convert bin file to SBL secure boot image file?

    The gmake command is suppose to be an end-to-end automated setup which will build the SBL in encrypted format.

    Best Regards,
    Aakash